Opt-in

Opt-in explained

Before the decision, explain who wants to use which data and for what purpose. The action must clearly match that choice. It may be an intentionally selected option or a clearly labelled signup; not every valid form needs the same checkbox design. Preselected consent, silence or simply continuing to browse is not active agreement. Different purposes must be appropriately separable.

Consent is one of several possible legal bases for personal data under the GDPR. It is not required for every processing activity: necessary contract fulfilment differs from additional advertising. Other rules may also apply by channel. Advertising emails in Germany require particular attention to section 7 UWG. Cookie choices, newsletter subscriptions and permissions for other data uses are therefore not interchangeable.

An opt-in must remain demonstrable. Document the statement, its scope at the time, timing and association in a way appropriate to the task. Do not collect unnecessary extra data merely to do so. The person must also be able to withdraw consent easily. Withdrawal ends further use based on that consent; it does not retrospectively invalidate previously lawful processing. Other necessary activities need their own basis.

Check implementation beyond the form. Does the correct status reach the sending system? Are unsubscribes respected in copies and connected workflows? What happens on a new signup? A consent dialogue or platform is only a tool. Good design makes choices and consequences clear and avoids forcing agreement through confusing language or unnecessary obstacles.